MWG Proxy: Cross-Frame Scripting vulnerability
CVE-2019-3635

4.3MEDIUM

Key Information:

Vendor

Mcafee, Llc

Status
Mcafee Web Gateway (mwg)
Vendor
CVE Published:
14 August 2019

What is CVE-2019-3635?

Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe.

Affected Version(s)

McAfee Web Gateway (MWG) 7.8.2.x < 7.8.2.12

References

https://kc.mcafee.com/corporate/index?page=content&id=SB1...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.